DLLGetDISMProviderCLSID
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
cdc3e2164a9c6cd5fbb2ef96582490b610c59dea22efc5f2f7e6800a09ecc448.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cdc3e2164a9c6cd5fbb2ef96582490b610c59dea22efc5f2f7e6800a09ecc448.dll
Resource
win10v2004-20240508-en
Target
cdc3e2164a9c6cd5fbb2ef96582490b610c59dea22efc5f2f7e6800a09ecc448
Size
401KB
MD5
82e4a628a626eef3f6ed502e875ad33e
SHA1
ad86565d4bd59763b92d0e824acdbdab32240d7d
SHA256
cdc3e2164a9c6cd5fbb2ef96582490b610c59dea22efc5f2f7e6800a09ecc448
SHA512
30d6bad5039de0b57a9b0ab52e746aae4d5deb5ae6cf133a2baa3e361fbe7f79b8e8a1430e2bc82eb8b9d6e5bbb6ac810020f7c8df9fc95322ac10d0e5d00ec4
SSDEEP
6144:0fsNhR7c3k7er0ggXqt8BJClDGZqdg0F0JANivsex6wAeX3dVH+ZV7GpEwH:tRc3zjeQsB0mJvkBu3dJqV7Gp
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cdc3e2164a9c6cd5fbb2ef96582490b610c59dea22efc5f2f7e6800a09ecc448 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
DLLGetDISMProviderCLSID
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ